Cipher Breaker privacy

1. In short

Cipher Breaker, the Android decryption helper, collects no personal data. It has no permission to access the internet: it cannot send anything, neither to CipherChronicle nor to anyone else. No account, no analytics, no ads, no crash reporting. Analysis, photo reading and breaking all run on your phone.

The only information that can leave your phone does so through an action of yours: buying the full version (handled by Google Play) and the links you open to the cipherchronicle.com website (see section 6).

This page only covers Cipher Breaker. For the Cipher Chronicle app, see the Android app privacy policy; for the website, the website privacy policy.

2. Controller

• Challenge My Project — Société par Actions Simplifiée (SAS)
• Registered office: 90 B rue de Fougères, 35700 Rennes, France
• SIREN: 880 614 110 — RCS Rennes
• Contact: [email protected]

Full publisher details are on the Legal notice page.

3. Messages and photos

• A typed or pasted message is analyzed and broken on the phone. It is added to the recent messages history (section 4).
• A photo is picked with the Android photo picker (the app only gets the chosen image) or taken with the phone’s camera, opened by Android: Cipher Breaker does not ask for camera permission. A photo taken this way is kept in the app’s cache and replaced by the next one. Symbols are read on the phone; the photo is neither sent nor copied anywhere else.
• The recovered text and its key are shown on screen; they are not saved. The “Copy” button puts them on the clipboard when you ask. The app never reads the clipboard.

4. Data stored on your phone

This data is stored in the app’s private storage, which other apps cannot read. It stays until you delete it, clear the app’s data or uninstall it.

Data	Why
Recent messages: the last 50 analyzed messages and their date.	Bring them back with one tap on the home screen. Each one can be deleted; “Clear history” (Settings) deletes them all.
Preferences: language, theme, introduction already seen.	Keep your settings.
Free version counters: number of analyses and photos today.	Apply the daily limits of the free version.
Licence state (full version bought or not).	Unlock the full version, offline too.

Android backup and device-to-device transfer are disabled: none of this data goes into your Google account backup. The full version is restored from Google Play (Settings, “Restore my purchase”).

5. Buying the full version

The one-time purchase of the full version goes through Google Play billing, via the Play Store app on your phone. Payment and payment methods are handled by Google under its own privacy policy; CipherChronicle has no access to them. The app only receives from Google Play the information “full version bought”, kept on the phone (section 4).

6. Links to the cipherchronicle.com website

Some buttons open the website in your browser (or the Cipher Chronicle app if installed): a cipher’s page, “Decrypt in CipherChronicle”, “Use the online version”… They only open when you tap them. The address then says it comes from the app (utm_source=cipher-breaker, utm_medium, utm_campaign parameters), which the website may measure under its privacy policy.

• “Decrypt in CipherChronicle” passes the cipher and key found in the part of the address after #, which is not sent to the server; neither the message nor the recovered text is sent.
• “Use the online version” (free version limit window) opens the website’s Decrypt page with your message in the address, so you don’t have to type it again. The website then handles that message as if you had typed it there.

7. Permissions

Cipher Breaker asks for no internet, camera, contacts, location, microphone or storage access. Its only permission is Google Play billing, for buying the full version.

8. Your rights

Since no data is sent to us, we hold nothing about you through the app. You stay in control: delete a recent message or the whole history in the app, clear its data in Android settings, or uninstall it.

For any question, write to [email protected] or use the Contact us page. You can also lodge a complaint with the French data protection authority, the CNIL.

9. Children

As the app collects no data, it sends no information about its users, children included.

10. Changes

If a version of the app changes what is described here (for example a feature that would need the internet), this page will be updated before that version is released. The last update date is shown at the top of the page.